[j-nsp] Stable JUNOS for srx5k with multiple SPCs

[Dale Shaw]

Hi all,

I know there have been some pretty ugly bugs on srx5k with multiple
SPCs in some early JUNOS 10.0 releases (and earlier). We're running
10.0R4 on a bunch of 5800s but while we have two SPCs per chassis,
only one is inserted and online.

I want to insert the 2nd SPC -- after all, we paid for 'em -- but I
wasn't filled with confidence when we tested one box within a
maintenance window tonight. I shut down the chassis, inserted the 2nd
SPC (in slot 10) and started it back up. FPC 10 PIC 1 (the 2nd SPU)
was pegged at 99% processor and the box was doing nothing except
maintain ~100 IPSec tunnels. A second reboot magically fixed the SPU
load problem (I couldn't influence it through any config changes or
operational commands) but by then any confidence I had was gone so I
rolled back the hardware change and didn't bother with the rest of the
systems.

Since playing with a newer JUNOS wasn't on the cards tonight, I've
decided to revisit the insertion of the 2nd SPC as part of a future
JUNOS upgrade. We'll be looking closely at 10.4R3 very soon.

Has anyone got stable srx5ks w/multiple SPCs in production networks?
Which JUNOS release?
(we do IPSec VPNs, OSPF, CoS [shaping, scheduling etc.],
RADIUS/NTP/SNMP/RMON/SSH, virtual routers, basic firewall filters,
basic security policy.)

Cheers,
Dale